GB/T 43254-2023 PDF English
US$860.00 · In stock · Download in 9 secondsGB/T 43254-2023: Functional safety requirements and testing methods for drive motor system of electric vehicles Delivery: 9 seconds. True-PDF full-copy in English & invoice will be downloaded + auto-delivered via email. See step-by-step procedureStatus: Valid
| Standard ID | Contents [version] | USD | STEP2 | [PDF] delivery | Name of Chinese Standard | Status |
| GB/T 43254-2023 | English | 860 |
Add to Cart
|
0-9 seconds. Auto-delivery
|
Functional safety requirements and testing methods for drive motor system of electric vehicles
| Valid |
Excerpted PDFs (Download full copy in 9 seconds upon purchase)PDF Preview: GB/T 43254-2023
GB/T 43254-2023: Functional safety requirements and testing methods for drive motor system of electric vehicles
---This is an excerpt. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.), auto-downloaded/delivered in 9 seconds, can be purchased online: https://www.ChineseStandard.net/PDF.aspx/GBT43254-2023
GB
NATIONAL STANDARD OF THE
PEOPLE’S REPUBLIC OF CHINA
ICS 43.040
CCS T 35
Functional safety requirements and testing methods for
drive motor system of electric vehicles
Issued on. NOVEMBER 27, 2023
Implemented on. JUNE 01, 2024
Issued by. State Administration for Market Regulation;
Standardization Administration of PRC.
Table of Contents
Foreword... 3
1 Scope... 5
2 Normative references... 5
3 Terms and definitions... 5
4 General requirements... 6
5 Definition of related items... 6
5.1 General requirements... 6
5.2 Functional concept... 6
5.3 Operating conditions and environmental constraints... 7
6 Hazard analysis and risk assessment... 7
6.1 General... 7
6.2 Safety objectives... 7
7 Functional safety requirements... 8
7.1 Prevent the motor from being unable to output driving torque... 8
7.2 Prevent the motor from unexpectedly outputting excessive driving torque... 10
7.3 Prevent the motor torque output direction from being reversed... 12
7.4 Prevent the motor from unexpectedly outputting driving torque... 14
7.5 Prevent the motor from being unable to output braking torque... 15
7.6 Prevent the unexpected output braking torque of the motor from being too large... 17
7.7 Prevent the motor from unexpectedly outputting braking torque... 19
8 Functional safety verification and validation... 21
8.1 General requirements... 21
8.2 Functional safety verification... 21
8.3 Functional safety confirmation... 31
Appendix A (Informative) Example of hazard analysis and risk assessment (HARA)
involving drive motor systems... 40
A.1 Definition of related items... 40
A.2 Hazard identification of related items at the vehicle level... 42
A.3 Scenario analysis... 43
A.4 Derivation of ASIL levels... 43
A.5 Safety objectives and safety status... 73
Appendix B (Informative) Example of how to determine fault tolerance time interval
(FTTI)... 74
B.1 Definition of fault tolerance time interval... 74
B.2 Example of definition of fault of unexpected motor output drive torque FTTI... 75
References... 77
1 Scope
This document specifies the functional safety requirements and test methods for drive
motor systems for electric vehicles (hereinafter referred to as "drive motor systems").
This document is applicable to drive motor systems for electric vehicles. Other types of
drive motor systems shall be implemented with reference to this document.
2 Normative references
The contents of the following documents constitute essential provisions of this
document through normative references in the text. Among them, for dated referenced
documents, only the version corresponding to that date applies to this document; for
undated referenced documents, the latest version (including all amendments) applies to
this document.
GB 18384-2020 Electric vehicles safety requirements
GB/T 18488 (all parts) Drive motor system for electric vehicles
GB/T 34590.1 ~ 34590.12-2022 Road vehicles - Functional safety
3 Terms and definitions
The terms and definitions as defined in GB/T 34590.1-2022, as well as the following
terms and definitions, apply to this document.
3.1Drive motor system
It is a system, which is installed on electric vehicles to provide driving force for
vehicle driving and realize the mutual conversion between mechanical energy and
electrical energy.
Note. It includes drive motor, drive motor controller, and auxiliary devices necessary for
their work. The auxiliary device includes a transmission device integrated with the drive motor.
3.2 Drive motor
An electrical device, that converts electrical energy into mechanical energy, to
provide driving force for vehicle driving. This device also has the function of
converting mechanical energy into electrical energy. [Source. GB/T 19596-2017,
definition 3.2.1.1.2.1, modified]
3.3 Drive motor controller
A device that controls the energy transmission between the power source and the
drive motor, which is composed of a control signal interface circuit, a drive motor
control circuit, a drive circuit power electronic module, etc.
4 General requirements
Unless otherwise specified, drive motor system's functional safety technology
development, process development and other requirements shall be implemented in
accordance with GB/T 34590.1 ~ 34590.12-2022.
5 Definition of related items
5.1 General requirements
Relevant items shall be defined in accordance with the requirements of GB/T 34590.3-
2022.Relevant items refer to systems or system combinations that implement vehicle-
level functions or partial functions.
Note. Relevant items and their scope are defined on actual situations Appendix A gives the
functional concepts and related item boundaries and interface examples with the drive motor
system as the related item.
5.2 Functional concept
In order to meet the safe operation of the vehicle and ensure the safety of people inside
and outside the vehicle and the vehicle environment, the drive motor system shall
monitor and protect the safe operation of the drive motor. The functional requirements
of the drive motor system shall also meet the functional requirements in GB/T 18488
(all parts) and GB 18384-2020.
5.3 Operating conditions and environmental constraints
In order to meet the safe operation of vehicles, it is necessary to clarify the operating
conditions and environmental constraints of relevant items, which may include (if
applicable).
6 Hazard analysis and risk assessment
6.1 General
According to the definition of relevant items in Chapter 5, in accordance with GB/T
34590.3-2022, based on vehicle usage scenarios, analyze and identify hazards caused
by failures in the drive motor system and classify the hazards; define the corresponding
automotive safety integrity level (ASIL); establish safety objectives to prevent
hazardous events from occurring or reduce the degree of hazards, to avoid unreasonable risks.
6.2 Safety objectives
The safety objectives and attributes of the drive motor system, which are determined
through hazard analysis and risk assessment, shall at least include the content listed in Table 1.
7 Functional safety requirements
7.1 Prevent the motor from being unable to output driving torque
7.1.1 General requirements
The vehicle controller unit (VCU) or other controllers (depending on the vehicle
electronic architecture) shall ensure the correctness and completeness of signals, such
as working mode requests and torque commands, as sent to the drive motor controller
unit (MCU).
7.1.2 Operation mode
The drive motor system shall be in driving working condition.
7.1.3 Fault tolerance time interval (FTTI)
The fault tolerance time interval for failure to output driving torque, as shown in Figure
1, shall be given based on analysis, testing, etc.
7.1.4 Entry and exit of safe status
When it is confirmed that a related fault that cannot output driving torque occurs, the
drive motor system enters the safe state by issuing a fault warning. When the related
fault that cannot output driving torque exits or the elimination conditions are not met,
it shall not exit the safe status.
7.1.5 Alarm and degrade concepts
When a fault related to the inability to output driving torque occurs, the drive motor
system shall feedback fault flag information.
7.2 Prevent the motor from unexpectedly outputting excessive driving torque
7.2.1 General requirements
The vehicle controller unit (VCU) or other controllers (depending on the vehicle
electronic architecture) shall ensure the correctness and completeness of signals, such
Drive torque less
7.2.2 Operating mode
The drive motor system shall be in working condition.
7.2.3 Fault tolerance time interval (FTTI)
The fault tolerance time interval for unexpected excessive output drive torque, as shown
in Figure 2, shall be given based on analysis, testing, etc.
Note. The fault tolerance time interval for unexpected excessive output drive torque is
determined by the vehicle manufacturer and the drive motor system supplier, through
negotiation.
7.2.4 Entry and exit of safe status
When it is confirmed that an unexpected fault related to excessive output driving torque
occurs, the drive motor system shall enter a safe status by issuing a fault warning and
terminating torque output; it shall not exit the safe status, when exiting due to faults
related to unexpected excessive output driving torque, or the elimination conditions are
not met.
7.2.5 Alarm and degrade concepts
When an unexpected fault related to excessive output drive torque occurs, torque
derating and other processing can be performed first on the premise of ensuring that it
can enter a safe status. The drive motor system shall feedback fault flag information.
7.3 Prevent the motor torque output direction from being reversed
7.3.1 General requirements
The vehicle controller unit (VCU) or other controllers (depending on the vehicle
Unexpected output drive torque
7.3.2 Operating mode
The drive motor system shall be in working condition.
7.3.3 Fault tolerance time interval (FTTI)
The fault tolerance time interval for the reverse direction of the drive motor's output
torque, as shown in Figure 3, shall be given based on analysis, testing, etc.
Note. The fault tolerance time interval for the reverse direction of the drive motor output torque
is determined by the vehicle manufacturer and the drive motor system supplier, through
negotiation.
7.3.4 Entry and exit of safe state
When it is confirmed that a fault related to the reverse direction of the drive motor's
torque output occurs, the drive motor system enters a safe state by issuing a fault
warning and terminating the torque output. If the fault related to the reverse direction
of the drive motor's torque output is exited or shall not be exited.
Note. Fault exit or elimination conditions are determined by the vehicle manufacturer and the
drive motor system supplier, through negotiation.
7.3.5 Alarm and degrade concepts
When a fault related to the reverse direction of the drive motor's torque output occurs,
the drive motor system shall feedback fault flag information.
7.4 Prevent the motor from unexpectedly outputting driving torque
7.4.1 General requirements
The vehicle controller unit (VCU) or other controllers (depending on the vehicle
electronic architecture) shall ensure the correctness and completeness of signals, such
as working mode requests and torque commands, as sent to the drive motor controller
unit (MCU).
7.4.2 Operating mode
The drive motor system shall be in a non-driving working state and the vehicle shall be
in a stationary state.
7.4.3 Fault tolerance time interval (FTTI)
The fault tolerance time interval for unexpected output drive torque, as shown in Figure
4, shall be given based on analysis, testing, etc.
Note. The fault tolerance time interval for unexpected output drive torque is determined by
negotiation between the vehicle manufacturer and the drive motor system supplier.
Figure 4 -- Fault tolerance time interval for unexpected output drive torque
7.4.4 Entry and exit of safe state
When it is confirmed that a fault related to unexpected output driving torque occurs, the
drive motor system enters a safe state by issuing a fault warning and terminating torque
output. When the conditions for exiting or eliminating the fault related to unexpected
output driving torque are not met, it shall not exit safe state.
Note. Fault exit or elimination conditions are determined by the vehicle manufacturer
and the drive motor system supplier, through negotiation.
7.4.5 Alerting and degrade concepts
When a fault related to unexpected output drive torque occurs, the drive motor system
shall feedback fault flag information.
7.5 Prevent the motor from being unable to output braking torque
7.5.1 General requirements
The vehicle controller unit (VCU) or other controllers (depending on the vehicle
electronic architecture) shall ensure the correctness and completeness of signals, such
as working mode requests and torque commands, as sent to the drive motor controller
8 Functional safety verification and validation
8.1 General requirements
Functional safety verification is to determine the completeness and correctness of
functional safety requirements. It shall be verified at the drive motor system level with
the purpose of proving functional safety requirements.
8.2 Functional safety verification
8.2.1 Prevent the motor from being unable to output driving torque
8.2.1.1 Test purpose
The drive motor system shall detect the output torque status. When the output drive
torque is lower than the safety threshold, the drive motor system shall enter a safe state.
When the fault exit or elimination conditions that cannot output drive torque are not
met, the drive motor system shall not exit the safe state.
8.2.1.2 Test objects
The test object is the drive motor system.
8.2.1.3 Test requirements
Testing in a simulated environment meets the following requirements.
8.2.1.4 Test end conditions
When any of the following conditions are met, the test in the simulation environment
ends.
8.2.1.5 Test passing criteria
The test passing criteria shall meet the following conditions at the same time.
8.2.2 Prevent the motor from unexpectedly outputting excessive driving torque
8.2.2.1 Test purpose
The drive motor system shall detect the output torque status. When the motor's
unexpected output of excessive driving torque exceeds the safety threshold, the drive
motor system shall enter a safe state. It shall not exit the safe state, when the conditions
to exit or eliminate the fault related to unexpected output of excessive driving torque
are not met.
8.2.2.2 Test objects
The test object is the drive motor system.
8.2.3 Prevent the motor torque output direction from being reversed
8.2.5 Prevent the motor from being unable to output braking torque
8.2.7 Prevent the motor from unexpectedly outputting braking torque
8.2.7.1 Test purpose
8.3 Functional safety confirmation
8.3.1 Prevent the motor from being unable to output driving torque
8.3.2 Prevent the motor from unexpectedly outputting excessive driving torque
8.3.2.4 Confirmation end conditions
Confirmation ends when any of the following conditions are met.
8.3.3 Prevent the motor torque output direction from being reversed
8.3.4 Prevent the motor from unexpectedly outputting driving torque
8.3.5 Prevent the motor from being unable to output braking torque
8.3.6 Prevent the unexpected output braking torque of the motor from being too large
8.3.7 Prevent the motor from unexpectedly outputting braking torque
......
Source: Above contents are excerpted from the full-copy PDF -- translated/reviewed by: www.ChineseStandard.net / Wayne Zheng et al.
Tips & Frequently Asked QuestionsQuestion 1: How long will the true-PDF of English version of GB/T 43254-2023 be delivered?Answer: The full copy PDF of English version of GB/T 43254-2023 can be downloaded in 9 seconds, and it will also be emailed to you in 9 seconds (double mechanisms to ensure the delivery reliably), with PDF-invoice. Question 2: Can I share the purchased PDF of GB/T 43254-2023_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 43254-2023_English will be deemed to be sold to your employer/organization who actually paid for it, including your colleagues and your employer's intranet. Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. www.ChineseStandard.us -- GB/T 43254-2023 -- Click this link and select your country/currency to pay, the exact amount in your currency will be printed on the invoice. Full PDF will also be downloaded/emailed in 9 seconds. How to buy and download a true PDF of English version of GB/T 43254-2023?A step-by-step guide to download PDF of GB/T 43254-2023_EnglishStep 1: Visit website https://www.ChineseStandard.net (Pay in USD), or https://www.ChineseStandard.us (Pay in any currencies such as Euro, KRW, JPY, AUD).
Step 2: Search keyword "GB/T 43254-2023".
Step 3: Click "Add to Cart". If multiple PDFs are required, repeat steps 2 and 3 to add up to 12 PDFs to cart.
Step 4: Select payment option (Via payment agents Stripe or PayPal).
Step 5: Customize Tax Invoice -- Fill up your email etc.
Step 6: Click "Checkout".
Step 7: Make payment by credit card, PayPal, Google Pay etc. After the payment is completed and in 9 seconds, you will receive 2 emails attached with the purchased PDFs and PDF-invoice, respectively.
Step 8: Optional -- Go to download PDF.
Step 9: Optional -- Click Open/Download PDF to download PDFs and invoice.
See screenshots for above steps: Steps 1~3 Steps 4~6 Step 7 Step 8 Step 9
|